Lucene search
+L

65146 matches found

Circl
Circl
added 2026/07/07 12:1 a.m.10 views

GHSA-72J9-356V-88XQ

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgcfkjb2s...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.20 views

PT-2026-56254

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The ShareSecretManage component uses a hardcoded default share link signature key. An attacker who obtains a passwordless share for a resource and user can use the known key link-pwd-fit2cloud to...

8.3CVSS6AI score0.00289EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.17 views

PT-2026-56249

Name of the Vulnerable Software and Affected Versions Dashy versions prior to 4.3.7 Description The workspace view fails to validate the scheme of the URL query parameter before assigning it to an iframe source. This allows an attacker to execute JavaScript on the Dashy origin by tricking a...

3.9CVSS6.3AI score0.00255EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.20 views

PT-2026-56244

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...

8.7CVSS6.1AI score0.00285EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.17 views

PT-2026-56300

Name of the Vulnerable Software and Affected Versions Better Auth versions prior to 1.6.11 Description An issue exists in the OAuth callback auto-link gate within the handleOAuthUserInfo function. The system allows implicit account linking when an OAuth provider asserts email verified: true witho...

8.3CVSS6.1AI score0.00152EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2026/07/07 12:0 a.m.8 views

The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.2AI score0.00405EPSS
SaveExploits0References11Affected Software3
Circl
Circl
added 2026/07/06 10:32 p.m.12 views

CVE-2026-55500

creationtimestamp| type| source ---|---|--- 2026-07-06 22:32:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz5g2pefd23 2026-07-10 15:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjavfcqz24 2026-07-10 17:00:40+00:00| seen|...

9.9CVSS6.1AI score0.00387EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/06 9:49 p.m.8 views

GHSA-473P-56XX-VG67 Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

Summary In Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...

5.8AI score
SaveExploits0References4
Circl
Circl
added 2026/07/06 9:42 p.m.9 views

GHSA-287W-MXQ6-X2CP

creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...

5.9AI score
SaveExploits0References1
Circl
Circl
added 2026/07/06 9:22 p.m.17 views

CVE-2025-53831

creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...

8.2CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:51 p.m.12 views

CVE-2026-14898

creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...

6.5CVSS5.9AI score0.00324EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:41 p.m.12 views

CVE-2026-54060

creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...

7.5CVSS4.8AI score0.00418EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/07/06 8:27 p.m.12 views

Directory Traversal

Overview org.webjars.npm:decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/06 8:27 p.m.22 views

Directory Traversal

Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/06 8:27 p.m.12 views

Directory Traversal

Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory containment check...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Circl
Circl
added 2026/07/06 8:26 p.m.11 views

CVE-2026-55379

creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...

7.5CVSS6.2AI score0.00421EPSS
SaveExploits1References2
Circl
Circl
added 2026/07/06 8:18 p.m.13 views

CVE-2026-9182

creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...

9.8CVSS5.9AI score0.00352EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/06 8:15 p.m.14 views

EUVD-2026-24981

rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...

7.7CVSS5.9AI score0.00185EPSS
SaveExploits0References5
Circl
Circl
added 2026/07/06 8:12 p.m.12 views

CVE-2026-35371

creationtimestamp| type| source ---|---|--- 2026-07-06 20:12:01+00:00| seen| https://gist.github.com/alon710/f5f0c292471d2cc05167d6fa94d49a4e...

3.3CVSS5.9AI score0.00123EPSS
SaveExploits1References1
Circl
Circl
added 2026/07/06 8:9 p.m.13 views

CVE-2026-44362

creationtimestamp| type| source ---|---|--- 2026-07-06 20:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvhisihn24...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Rows per page
Query Builder